HTTPS SSL encryption is vulnerable

[Derrick]

http://mybroadband.co.za/news/quick-news/34690-https-ssl-encryption-vulnerable.html

HTTPS SSL encryption is vulnerable to decryption by hackers..

 

[Bobbin]

Sheesh is there ever not a vulnerability in something online :/ seems even the things you trust can no longer be trusted.

 

[UnUnOctium]

90% of encryption schemes can be cracked by a man-in-the-middle attack. With encryption, the biggest difficulty always has been a secure key exchange. Fact of the matter is, it's highly unlikely that anyone can establish a successfull man-in-the-middle position before any key exchange happens unless the server and/or client is compromised.

 

[Plaasjapie]

90% of encryption schemes can be cracked by a man-in-the-middle attack. With encryption, the biggest difficulty always has been a secure key exchange. Fact of the matter is, it's highly unlikely that anyone can establish a successfull man-in-the-middle position before any key exchange happens unless the server and/or client is compromised.

what about if the transfer medium is wireless ?

 

[UnUnOctium]

what about if the transfer medium is wireless ?

Same thing. Man-in-the-middle are based on the fact that medium is compromised, be it wired or wireless.

 

[sn3rd]

One contains code that must be loaded into the victim's web browser and the second one captures and decrypts HTTPS session cookies.

This is old news. Known-plaintext attacks against SSL have been out in the open for years.

And there are easier (and faster and more reliable) ways to compromise a user than this.